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(57) Abstract: Illegitimate use of IP addresses is 
counteracted. A network (1) includes a switch (5) with 
ports (P1,P2,P3) to subscribers (6,6A) and a port (FN) to a 
core network (2) with DHCP servers (4, 4a,4b). The switch 
includes a database (MACl. MAC2), port numbers (PI, P2) 
and VLAN identities (VLANl. VLAN2) for the subscribers 
(6, 6A) and the filter has a list over trusted DHCP servers. 
Initially onlY DHCP messages from the subscribers are 
allowed. When the subscriber (6) requests (Ml, M3) for an 
IP address it is checked that it is a DHCP message with valid 
subscriber values (MACl, PI, VLANl). A respond (M2, 
M4) with an allocated IP address (IPl) and lease time interval 
(Tl) is checked to come ficom a trusted DHCP server. If so, 
a list in the filter (9) with correct information is dynamically 
generated (MACl, PI. VLANl, IPl, Tl). A messsage (M5) 
from the subscriber (6) with false IP address is discarded by 
the filter. Attempts by the subscriber to use false IP address 
are counted and a warning signal is generated. 



^2004/042999 Al lilllllliillllllHIIIIIIIIIIIIIIIIIIII^ 



For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



